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Access to Information Act 


INTRODUCTION 


The purpose of the Access to Information Act, proclaimed in July 1983, is “to 
extend the present laws of Canada to provide the right of access to information in 
records under the control of a government institution” (section 2) to Canadians, 
permanent residents and anyone living in Canada. The four principles underlie 
this legislation: 


e government information should be available to the public; 

e necessary exceptions to the right of access should be limited and specific; 

e the Act is not meant to replace existing means of providing information; 
and 

e decisions on the disclosure of government information should be reviewed 
independently of government. 


This Annual Report to Parliament is for the 2003-2004 fiscal year, as required 
under subsections 72(1) and 72(2) of the Access to Information Act. 


DELEGATED AUTHORITIES 


Under Section 73 of the Access to Information Act, the Minister’s authority is 
delegated to enable the Department to meet the requirements of the Act and 
exercise its powers. Responsibility for all sections of the Act has been delegated 
to the Corporate Secretary, Office of the Corporate Secretariat and to the 
Departmental Access to Information and Privacy Coordinator. 


HIGHLIGHTS 


Between April 1, 2003, and March 31, 2004, the Department received 363 
requests for information under the Access to Information Act (see Figure 1). This 
represented a 10% rise over the previous reporting period and a continuation of 
the trend toward gradual increases. Along with the new requests received, 67 
requests were carried over from the previous fiscal year, for a total of 430 
requests. During the reporting period, 382 requests were completed; 48 will be 
carried over to the next reporting period. The Department continues to be 
committed to improving timeliness in responding to requests. In 2002-2003, 
responses were provided within the legislated time frame in 92% of cases. The 
same rate of 92% was maintained in 2003-2004. 


Number of Requests Received | 
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Figure 1 


In fiscal year 2003-2004, the Access to Information and Privacy unit processed 
all new requests using ATIP Image, a new database enabling requests to be 
processed electronically. This significantly reduced the amount of paper used in 
the unit. All responsive records are scanned into the database, making it possible 
to review and sever records on screen. With this software, the unit was able to 
process requests more efficiently and provide requesters the option of receiving 
their response packages on CD, thereby saving photocopy fees. Since all files 
are now Stored on CD, less physical space is required for file storage. 


REQUESTER SOURCES 


The Access to Information requests received during this reporting period are 
broken down as follows (see Figure 2): 


e Academia PL, 
e Public 97 
e Media 50 
e Organization 70 
e Business 120 


Figure 2 


Figure 3 
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DISPOSITION OF COMPLETED REQUESTS 


The disposition of completed requests is as follows (see Figure 3): 


e All disclosed 95 (24.9%) 
e Disclosed in part 175 (45.8%) 
e Nothing Disclosed (Excluded) 1 (0.3%) 
e Nothing Disclosed (Exempt) 9 (2.4%) 
e Transferred re (1.8%) 
e Unable to Process 61 (15.9%) 
e Abandoned by Applicant Ss (8.6%) 
e Treated Informally 1 (0.3%) 
TOTAL COMPLETED 382 
@ 30 days or under 1} 
D 31 to 60 days HH 
0 61 to 120 days 
@ 121 days or over 
Figure 4 


FEES AND COSTS 


Fees are calculated in accordance with provisions of the Access to Information 
Act and attendant regulations. A $5.00 application fee is charged for processing 
a request. The first five hours of processing the request are free of charge; any 
further time is charged at a rate of $10.00 per hour. A photocopy fee of $0.20 per 
page is charged if more that 125 pages must be copied. However, requesters 


have the option of receiving records on CD without charge. Fees may be waived 
at the discretion of the Department. For the reporting period, the Department 
collected $5,835.60 in fees. It waived $21,178.10 in fees as a result of the use of 
CDs in providing responses to requesters. 


CONSULTATIONS WITH OTHER INSTITUTIONS 


When a request contains records that are of a greater interest to another 
institution, the Access to Information and Privacy Coordinator of that institution is 
consulted. Indian and Northern Affairs Canada was consulted in 99 cases in the 
reporting period. In turn, the Department initiated 313 consultations as a result of 
91 requests for information. For the 99 cases in which the Department was 
consulted, the Access to Information and Privacy unit reviewed 4,162 pages and 
agreed to release 2,694 pages (see Figure 5). 
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COMPLAINTS AND INVESTIGATIONS 


To ensure that federal institutions fully comply with the Act, and that all 
requesters are treated fairly and consistently, sections 41 to 53 of the Access to 
Information Act provide for a two-tiered system of review of decisions made 
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under the Act. The first level is a formal complaint to the Information 
Commissioner and the second level is an appeal to the Federal Court. 


During the reporting period, 15 complaints against the Department were filed with 
the Information Commissioner. To deal with these, 11 investigations were 
completed; 4 will be carried over to the next reporting period. Of the 11 
completed investigations, the Information Commissioner found that 3 complaints 
were not substantiated and 8 complaints were resolved to the satisfaction of the 
requester. 


The Department received one appeal from the Federal Court during this reporting 
period. The appeal was withdrawn. 
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INTRODUCTION 


The purpose of the Privacy Act, proclaimed in July 1983, is “to extend the 
present laws of Canada protecting the privacy of individuals with respect to 
personal information about themselves held by a government institution and that 
provide individuals with a right of access to that information” (section 2). 


This Annual Report to Parliament is for the fiscal year 2003-2004, as required 
under subsections 72(1) and 72(2) of the Privacy Act. 


DELEGATED AUTHORITIES 


Under section 73 of the Privacy Act, the Minister's authority is delegated to 
enable the Department to meet its legislated requirements and exercise its 
powers. Responsibility for all sections to the Act has been delegated to the 
Corporate Secretary, Office of the Corporate Secretariat, and to the departmental 
Access to Information and Privacy Coordinator. 


HIGHLIGHTS 


Between April 1, 2003 and March 31, 2004, the Department received 342 
requests for information under the Privacy Act (see Figure 1). In addition, 7 
requests were carried over from the previous fiscal year, for a total of 349 
requests. During the reporting period, 344 requests were processed; 5 will be 
carried over to the next reporting period. The most common type of request was 
for records that related to registration issues, staff relations, federal day schools 
and Indian residential schools. Of the 344 completed requests, 12,901 pages of 
records reviewed; of those, 6,360 pages were released. 
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Figure I 
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Figure 2 


DISPOSITION OF COMPLETED REQUESTS 
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DISCLOSURE OF PERSONAL INFORMATION 
Subsection 8(2)(b) 


Personal information may be disclosed “for any purpose in accordance with any 
Act of Parliament or any regulation made thereunder that authorizes its 
disclosure.” 


Under this subsection of the “Privacy Act, 42 requests were received and 
processed. All pertained to subsection 19(1) of the /mmigration and Refugee 
Protection Act. 


Subsection 8(2)(c) 


Personal information may be disclosed for the purpose of complying with a 
subpoena or warrant issued or made by a court, person or body with jurisdiction 
to compel the production of information or for the purpose of complying with rules 
of the court relating to the production of information.” 


Under this subsection of the Privacy Act, 3 requests were received and 
processed. All related to court cases involving federal day schools. 


Subsection 8(2)(d) 


Personal information may be disclosed “to the Attorney General of Canada for 
use in legal proceedings involving the Crown in the right of Canada for the 
Government of Canada.” 


Under this subsection of the Privacy Act, 87 requests were received and 
processed. 


Subsection 8(2)(e) 


Personal information may be disclosed “to an investigative body ... for the 
purpose of enforcing any law of Canada or a province or carrying out a lawful 
investigation.” 


Under this subsection of the Privacy Act, 18 requests were received and 
processed. 


Subsection 8(2)/(f) 


Personal information may be disclosed under an agreement or arrangement 
“between the Government of Canada ... and the government of a province [or 
territory] ... for the purpose of administering or enforcing any law or carrying out 
a lawful investigation.” 


Under this subsection of the Privacy Act, 59 requests were received and 
processed. 


Subsection 8(2)(j) 


Personal information may be disclosed “to any person or body for research or 
statistical purposes. “ 


Under this subsection of the Privacy Act, 1 request was received and processed. 
Subsection 8(2)(k) 


Personal information may be disclosed “to any ... association of aboriginal 
people, Indian band, government institution or part thereof, or to any person 
acting on behalf of such ... association, band, institution or part thereof, for the 
purpose of researching or validating the claims, disputes or grievances of any 
aboriginal peoples of Canada.” 


Under this subsection of the Privacy Act, 5 requests were received and 
processed. 


Disclosure of Personal Information 


1 5 


42 
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Figure 4 


COMPLAINTS AND INVESTIGATIONS 


To ensure that federal institutions fully comply with the Act, and that all 
requesters are treated fairly and consistently, subsections 29 and subsections 41 
through 52 of the Privacy Act provide for a two-tiered system of review of 
decisions made under the Act. The first level is a formal complaint to the Privacy 
Commissioner and the second level is an appeal to the Federal Court. 


During fiscal year 2003-2004, one complaint against the Department filed with 
the Privacy Commissioner. It was resolved and no action was required. 
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Privacy Act 


PRIVACY IMPACT ASSESSMENTS 


Indian and Northern Affairs Canada (INAC) is committed to the protection of 
personal information used in the course of providing programs and services to 
the public. In adhering to the Government of Canada’s Privacy Impact 
Assessment Policy, INAC has limited privacy implications and associated risks 
by properly managing its personal information holdings and addressing issues 
related to these holdings. During fiscal year 2003-2004, the Department 
undertook three Privacy Impact Assessments (PIAs). One of these was 
completed within that period: a PIA of the Indian Registration System / Certificate 
of Indian Status Project.. 


The Indian Registration System (IRS) is the authoritative source of information 
about Registered Indians, and is required to support the registration, entitlement, 
adoptions and protests processes. The Indian Register is currently contained 
within the IRS. Given the crucial role of the system, data integrity within the IRS 
is essential. INAC provides Registered Indians with a card certifying their 
registration as an Indian. A Certificate of Indian Status (CIS), commonly referred 
to as a Status Card or Treaty Card, is issued by the Department after the 
Registrar has determined that an individual is entitled to Indian status. 


Through extensive consultations with experts in the fields of privacy, security and 
law, and with IRS program staff, the of the Indian Registration System 
/Certificate of Indian Status Project was able to identify potential risks associated 
with the service delivery of the IRS and subsequently to reduce the risks through 
an action plan that it developed. Consultations with the Office of the Privacy 
Commissioner (OPC) we of great benefit to the PIA and INAC ensured that the 
Office’s recommendations were followed. In a letter of response, OPC stated, “If 
the matters raised in this correspondence are addressed, we are confident that 
the IRS/CIS project will pose few significant privacy risks to Canadians.” 


Indian and Northern Affairs Canada is custodian of vast quantities of personal 
information of Canada’s First Nations people. It is well aware of the obligation to 
strictly protect this information and uphold privacy principles. The Privacy Impact 
Assessment Policy is a means of ensuring INAC meets its obligations and 
minimizes the risks of breaching these principles. In maintaining its commitment 
to the Policy, the Department will continue to ensure that personal information 
about First Nations people is respected and protected in accordance with the 
Privacy Act and accepted privacy principles. 
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